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Amendments to the Claims: 

1. (Currently amended) A method of protecting a digital work, z, during 
transformation by a transformation function, F, into presentation data F(z), wherein the 
digital work includes digital content and formatting information, comprising: 

encrypting the digital work, z, in accordance with a format preserving encryption 
scheme, E . which preserves formatting information of the digital work ; 

transforming the encrypted digital work E(z) into encrypted presentation data, 
F(E(z)); and 

decrypting the encrypted presentation data, F (E(z)), in accordance with a 
decryption function, D, to obtain the presentation data, F(z), wherein D(F(E(z))) = F(z). 

2. (Original) The method of claim 1, wherein the encryption function E is an 
additive encryption scheme. 

3. (Original) The method of claim 2, wherein the additive encryption scheme is 
selected from the group consisting of Mult, Exp, EG, OU, RSA and compositions thereof. 

4. (Original) The method of claim 1, wherein F is any multivariate, integer 
coefficient affine functions and E is an additive encryption scheme. 

5. (Original) The method of claim 1, wherein F comprises an affine type coordinate 
transformation in x- and y- coordinates of the form x 1 = ax + bx + e and y f = cy + dy + f, 
where a, b 5 c, d, e, and f are coefficients, (x, y) is the original location of an element in the 
digital work z and (x f , y f ) is the transformed location. 

6. (Original) The method of claim 1, wherein the digital work comprises a token- 
based document comprising a dictionary T of token images, a table of coordinate location 
information corresponding to each page of the document, and the transformation function 
F includes a Lookup routine that accesses the table of coordinate location information. 
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7. (Original) The method of claim 6, wherein the table of coordinate location 
information is encrypted using an additive encryption scheme and the dictionary of token 
images is encrypted using any encryption scheme. 

8. (Original) The method of claim 6, wherein the dictionary T consists of a 
collection of pairs, each comprising an identifier and an associated token, (id, t), the table 
of location information comprises a table of tuples, (id, x, y) each comprising an identifier 
id, an x-coordinate and a y-coordinate for each page of the document, and wherein the 
transformation function F includes a subroutine Lookup that, given a valid token identifier 
id, returns its corresponding token image t in T. 

9. (Original) The method of claim 6, wherein the token images comprise characters 
and graphics. 

10. (Original) The method of claim 5, wherein the encryption scheme E encrypts 
the variables x and y while leaving the coefficients (a, b, c, d, e, if) in the clear. 

1 1 . (Original) The method of claim 1 , wherein the digital work z comprises data x 
and coordinate information a, wherein the transformation function F converts encrypted 
data x and coordinate information a into presentation data F(a, E(x)) = E(F(a, x)). 

12. (Original) The method of claim 8, wherein E is an additive encryption scheme 
and any combination of the tuples (id, x, y) may be encrypted by E. 

13. (Original) The method of claim 8, wherein the location table is encrypted by an 
additive encryption scheme and the token identifiers are encrypted by a probabilistic 
encryption scheme. 

14. (Currently amended) A system of protecting a digital work, z, during 
transformation by a transformation function, F, into presentation data F(z), wherein the 
digital work includes digital content and formatting information, comprising: 
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an encryption engine for encrypting the digital work, z, in accordance with a 
format preserving encryption scheme, E . which preserves formatting information of the 
digital work ; 

a transformation functio n, F. for transforming the encrypted digital work E(z) into 
encrypted presentation data, F(E(z)); and 

a decryption engine for decrypting the encrypted presentation data, F (E(z)), in 
accordance with a decryption function, D, to obtain the presentation data, F(z), wherein 
D(F(E(z))} = F(z). 

15. (Original) The system of claim 14, wherein the encryption function E is an 
additive encryption scheme. 

16. (Original) The system of claim 15, wherein the additive encryption scheme is 
selected from the group consisting of Mult, Exp, EG, OU, RSA and compositions thereof. 

17. (Original) The system of claim 14, wherein F is any multivariate, integer 
coefficient affine functions and E is an additive encryption scheme. 

18. (Original) The system of claim 14, wherein F comprises an affine type 
coordinate transformation in x- and y-coordinates of the form x 1 = ax + bx + e and y' = cy 
+dy + f, where a, b, c, d, e, and f are coefficients, (x, y) is the original location of an 
element in the digital work z and (x r , y 1 ) is the transformed location. 

19. (Original) The system of claim 14, wherein the digital work comprises a token- 
based document comprising a dictionary T of token images, a table of coordinate location 
information corresponding to each page of the document, and the transformation function 
F includes a Lookup routine that accesses the table of coordinate location information. 

20. (Original) The system of claim 18, wherein the table of coordinate location 
information is encrypted using an additive encryption scheme and the dictionary of token 
images is encrypted using any encryption scheme. 
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21. (Original) The system of claim 18, wherein the dictionary T consists of a 
collection of pairs, each comprising an identifier and an associated token, (id, t), the table 
of location information comprises a table of tuples, (id, x, y) each comprising an identifier 
id, an x-coordinate and a y-coordinate for each page of the document, and wherein the 
transformation function F includes a subroutine Lookup that, given a valid token identifier 
id, returns its corresponding token image t in T. 

22. (Original) The systpm of claim 18, wherein the token images comprise 
characters and graphics. 

23. (Original) The system of claim 17, wherein the encryption scheme E encrypts 
the variables x and y while leaving the coefficients (a, b, c, d, e, t) in the clear. 

24. (Original) The system of claim 14, wherein the digital work z comprises data x 
and coordinate information a, wherein the transformation function F converts encrypted 
data x and coordinate information a into presentation data F(a, E(x)) = E(F(a, x)). 

25. (Original) The system of claim 21, wherein E is an additive encryption scheme 
and any combination of the tuples (id, x, y) may be encrypted by E. 

26. (Original) The system of claim 21, wherein the location table is encrypted by 
an additive encryption scheme and the token identifiers are encrypted by a probabilistic 
encryption scheme. 
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